CVE-2025-24494: Keysight Ixia Vision Product Family

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

Path traversal may allow remote code execution using privileged account (requires device admin account, cannot be performed by a regular user). In combination with the 'Upload' functionality this could be used to execute an arbitrary script or possibly an uploaded binary. Remediation in Version 6.7.0, release date: 20-Oct-24.

Affected products

• Keysight Ixia Vision Product Family: version 6.3.1 only

Published 2025-03-05. Last modified 2026-06-17.